Full Changelog: v0.6.0...v0.6.1
- Updated dev dependencies
- Fixed uncaught crash in async decompression on malformed DEFLATE data
- Fixed addLocalFolder following symlinks out of the archived folder
- Stripped setuid/setgid/sticky bits from extracted file permissions
- Enforced the decompression size cap on the async path and for size 0
- Rejected archives with duplicate entry names
- Blocked extraction from writing through symlinks inside the target
- Routed malformed-header parse errors through the async callback
- Rejected zip entries whose declared data extent runs past the buffer
- Fixed addLocalFolderPromise hanging on empty folders and swallowing errors
- Fixed addLocalFolderAsync2 mangling local paths on Windows